Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAT only work in the PfSense BOX not other client in LAN [solved with 2.0]

    Scheduled Pinned Locked Moved NAT
    33 Posts 3 Posters 13.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      syedadi
      last edited by

      @Metu69salemi:

      And your screenshot of wan doesnt have that port. nearyst it has is 5331, which seems to be your management port for pfsense

      I put some new rules in WAN Firewall but it sill not working

      Interface: WAN
      Protocol: TCP/UDP
      Source: any
      Destination: 192.168.0.250
      Destination port range: any

      1 Reply Last reply Reply Quote 0
      • M
        Metu69salemi
        last edited by

        Have you tried to boot?

        Just kidding. you're rules seems to be ok. My settings is almost the same and those work well.
        That public ip address, is it hardware ip-address or some sort of virtual ip, if virtual what kind of?

        1 Reply Last reply Reply Quote 0
        • S
          syedadi
          last edited by

          External IP add is hardware base, not virtual. I assign it manually. Reboot? not yet….it seem the port forward only respond in the BOX itself, could not go outside because the SSH and web-configuration can be access with out any problems.  :'( What version do you used? i'm using

          2.0-RC3 (i386)
          built on Thu Aug 4 12:47:50 EDT 2011

          letter i try to reboot after all client gone off-line.  :-[

          1 Reply Last reply Reply Quote 0
          • M
            Metu69salemi
            last edited by

            No need to boot, it was a joke.

            But the real question was, how many public ip-addresses you have and how many you try to use in this setup?

            1 Reply Last reply Reply Quote 0
            • S
              syedadi
              last edited by

              In that BOX i only used one, but in the ADSL router, we have 5 IP….

              i think the problems is in the box because i can doNAT using Untangle server to the same web server....i think it bug..what version do you used?

              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                Is there any reason to have routing dsl box between internet and pfsense? if not try to setup that in bridging mode. that ease up a little troubleshooting.
                atm i'm using really old version(built on Mon Jul 11 19:53:22 EDT 2011 ) waiting a good time to update. i had no problems with the older ones so i'm not waiting  problems when updating.

                1 Reply Last reply Reply Quote 0
                • S
                  syedadi
                  last edited by

                  no any routing there…just direct to the pf BOX...

                  the UTbox run fine for NAT, PFbox make me want to cry  :'(

                  1 Reply Last reply Reply Quote 0
                  • M
                    Metu69salemi
                    last edited by

                    check this: wan side of your pfsense, does it get public ip or what kind of it gets?

                    1 Reply Last reply Reply Quote 0
                    • S
                      syedadi
                      last edited by

                      Yes, it is public IP that i put it manually..i can ping the IP from outside.

                      1 Reply Last reply Reply Quote 0
                      • M
                        Metu69salemi
                        last edited by

                        Does your modem get public ip with dhcp or do you have static ip-addresses

                        1 Reply Last reply Reply Quote 0
                        • S
                          syedadi
                          last edited by

                          my modem was setting to put the IP staticaly

                          1 Reply Last reply Reply Quote 0
                          • M
                            Metu69salemi
                            last edited by

                            What kind of connection you have to internet pppoe? or something else?

                            1 Reply Last reply Reply Quote 0
                            • S
                              syedadi
                              last edited by

                              Yes PPPOE and the connection made in the modem

                              1 Reply Last reply Reply Quote 0
                              • M
                                Metu69salemi
                                last edited by

                                What if you change pppoe to the pfsense? and leave modem to be only mediaconverter(rj45 to rj11)

                                1 Reply Last reply Reply Quote 0
                                • S
                                  serangku
                                  last edited by

                                  thats double NAT
                                  you should make double port forward too …

                                  make pppoe dialed from pfsense, modem just on bridge
                                  so NAT only on pfsense box, thats easier to troubleshoot then

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    syedadi
                                    last edited by

                                    @serangku:

                                    thats double NAT
                                    you should make double port forward too …

                                    make pppoe dialed from pfsense, modem just on bridge
                                    so NAT only on pfsense box, thats easier to troubleshoot then

                                    What do you mean double NAT? i don't understand? how can it be so complicated in PF box, because when using Untangle BOX it doing just fine with a simple port forward…  :'(

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      syedadi
                                      last edited by

                                      @Metu69salemi:

                                      What if you change pppoe to the pfsense? and leave modem to be only mediaconverter(rj45 to rj11)

                                      I can't do that because i've 5 IPs from that modem…if i removed it, that should be too complicated for me to used other IPs..

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        Metu69salemi
                                        last edited by

                                        I've got also 5 static ip's and uncontinous block, but in same subnet so i created carp vips for the "extra ip's" fifth one was given in installation point so there was no need to create fifth carp vip.

                                        Please read howto's those are really selfexplaining. And if don't want go todo that way, fine it's your decision, but then i'm not able to help you any further

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          syedadi
                                          last edited by

                                          Thanks  :D

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            syedadi
                                            last edited by

                                            still no luck for me to do the 'NAT'ing…i've try other distro, the NAT went smoothly with out any trouble..i need to setup the nat in the pfsense....  :'( now using built on Wed Aug 24 10:02:03 EDT 2011

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.